CVE-2006-2766

Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service (application crash) via a long mhtml URI in the URL value in a URL file.

Affected products

Internet Explorer, Outlook Express, Windows, Windows Explorer

Microsoft Ie

= 6.0

Microsoft Internet Explorer

= 6.0, 7.0

Fix

Available

CVSS 2.0

2.6 LOW

EPSS

47.9% (99th percentile)

NVD status

Modified

Published

2006-06-02